tests pass
working on adding auth to the api